Make OCSP response verification more flexible.